$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcceddf3-bd72-422c-8161-45788b77bd92.roa File: dcceddf3-bd72-422c-8161-45788b77bd92.roa (raw, json) Hash identifier: xUIlfS1YTjB8TmoKRCNR8GV9TePthJZVc2FqfGTOxck= Subject key identifier: 67:30:16:D2:78:88:8B:6E:BA:43:D6:7A:05:00:0F:0B:3D:9A:C5:C9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 227E22A793263F8B88C20F488218DB3885B3CB39 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcceddf3-bd72-422c-8161-45788b77bd92.roa Signing time: Tue 04 Nov 2025 01:00:07 +0000 ROA not before: Tue 04 Nov 2025 01:00:07 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7e:22:a7:93:26:3f:8b:88:c2:0f:48:82:18:db:38:85:b3:cb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 01:00:07 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=5693577a58acde74de9c80dc803b955b5b302e62700508f3e968793a0c723454, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3f:e3:75:e3:d7:26:ce:d0:6d:9b:a9:8c:73: 1a:47:f2:84:06:b5:46:61:b2:5f:4f:cb:d5:3d:5f: 2e:fa:2a:dd:a4:d8:b0:b0:8a:de:0d:b4:f1:f7:71: ee:60:9c:c1:3f:4f:79:02:26:b8:00:d4:87:45:2c: 08:d1:13:2a:e5:fa:35:38:71:b7:b5:0f:d3:14:f6: 1c:44:da:dc:09:67:ab:f0:f2:76:2d:b7:36:e2:82: 89:d8:cb:2d:c9:31:c6:0a:cd:68:e1:4f:f7:96:56: 1d:78:1e:81:86:0b:ee:5c:ae:27:c4:b0:f2:c7:db: 81:a5:d6:44:1c:97:96:f7:e7:b3:39:15:60:05:fb: 0c:30:e3:92:3c:02:58:e8:14:2a:2a:e9:27:6a:9b: b7:85:21:c4:4f:19:72:6e:1b:c0:8e:74:f5:e7:c6: a8:d6:63:e3:6c:c5:14:35:39:d2:23:ab:4d:e5:85: be:18:9f:bc:b3:ce:92:f3:ba:a5:94:b2:23:c3:e7: 9d:d4:d4:fe:d0:3b:a6:d3:21:3d:59:b4:f3:be:9c: d3:2b:c8:19:00:35:7a:f1:2f:f0:c9:8e:13:57:46: 8d:d2:9c:41:85:da:e2:db:46:16:21:36:e2:4e:85: 43:65:0b:c3:8b:0d:54:54:de:73:d9:bf:04:64:eb: da:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:30:16:D2:78:88:8B:6E:BA:43:D6:7A:05:00:0F:0B:3D:9A:C5:C9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcceddf3-bd72-422c-8161-45788b77bd92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.185.0/24 Signature Algorithm: sha256WithRSAEncryption 23:c6:cd:53:ba:19:47:0c:ed:73:68:08:77:9b:17:6c:f3:7d: a7:a6:af:b4:6b:97:8d:75:1d:51:61:7d:a2:51:37:74:02:44: a7:f8:50:97:66:ff:fb:c0:29:e3:f7:4a:99:48:f5:ea:51:71: 08:1a:be:fe:50:71:83:13:2d:01:21:87:8c:fc:da:55:8b:b1: fa:36:e5:27:d2:60:a8:2d:33:5b:24:db:0c:84:48:42:5c:9f: 76:d2:c5:28:0f:2c:3e:54:4a:61:31:fc:75:30:14:16:31:58: 36:66:6f:32:d1:91:91:df:6b:c8:49:35:1e:b4:83:b4:c1:b4: d1:15:ec:14:1a:6c:25:4a:1a:7c:ef:0d:4a:48:f6:da:20:f5: 43:dc:c9:28:b4:25:f7:b0:54:44:1e:ba:fe:68:81:88:79:86: 69:8e:c3:86:3c:1b:31:92:6b:09:13:11:e4:ad:36:67:51:26: 0f:e4:c7:1f:26:33:dd:5e:f7:1c:e5:c3:cb:af:d9:2c:b5:af: 37:50:f1:df:53:78:ee:fa:4f:73:02:f9:ad:e0:cb:12:7b:76: fb:64:a7:89:d3:7a:55:68:c7:36:98:45:df:3d:0c:4e:96:f8: 3e:5b:cf:78:6c:81:0e:25:2b:c6:a1:81:5d:85:ff:2e:87:57: 9a:df:3c:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIn4ip5MmP4uIwg9IghjbOIWzyzkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDEwMDA3WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjkzNTc3YTU4YWNkZTc0ZGU5YzgwZGM4MDNiOTU1YjVi MzAyZTYyNzAwNTA4ZjNlOTY4NzkzYTBjNzIzNDU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXP+N149cmztBtm6mMcxpH8oQGtUZhsl9Py9U9Xy76Kt2k 2LCwit4NtPH3ce5gnME/T3kCJrgA1IdFLAjREyrl+jU4cbe1D9MU9hxE2twJZ6vw 8nYttzbigonYyy3JMcYKzWjhT/eWVh14HoGGC+5crifEsPLH24Gl1kQcl5b357M5 FWAF+www45I8AljoFCoq6Sdqm7eFIcRPGXJuG8COdPXnxqjWY+NsxRQ1OdIjq03l hb4Yn7yzzpLzuqWUsiPD553U1P7QO6bTIT1ZtPO+nNMryBkANXrxL/DJjhNXRo3S nEGF2uLbRhYhNuJOhUNlC8OLDVRU3nPZvwRk69qVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZzAW0niIi266Q9Z6BQAPCz2axckwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RjY2VkZGYzLWJkNzItNDIyYy04MTYxLTQ1Nzg4Yjc3YmQ5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0LrkwDQYJKoZIhvcNAQELBQADggEBACPGzVO6GUcM7XNoCHebF2zzfaem r7Rrl411HVFhfaJRN3QCRKf4UJdm//vAKeP3SplI9epRcQgavv5QcYMTLQEhh4z8 2lWLsfo25SfSYKgtM1sk2wyESEJcn3bSxSgPLD5USmEx/HUwFBYxWDZmbzLRkZHf a8hJNR60g7TBtNEV7BQabCVKGnzvDUpI9tog9UPcySi0JfewVEQeuv5ogYh5hmmO w4Y8GzGSawkTEeStNmdRJg/kxx8mM91e9xzlw8uv2Sy1rzdQ8d9TeO76T3MC+a3g yxJ7dvtkp4nTelVoxzaYRd89DE6W+D5bz3hsgQ4lK8ahgV2F/y6HV5rfPMI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:49:40 2025 by rpki-client